Description

Review security controls for GCP Shared VPC, interconnects, service accounts, IAM, and network segmentation. · Implement Sentinel policies for enforcing encryption standards. · Implement database activity monitoring and blocking rules in GCP. · Assess AI-specific risks, including prompt/context leakage, model input/output handling, and knowledge store access. · Produce findings report with risk ratings, gaps, and remediation recommendations. · Review application architecture, integrations, APIs, and data flows to identify security risks. · Assess sensitive data handling, including Personally Identifiable Information (PII), financial, payroll, and supplier information. · Evaluate identity and access management (IAM), role-based access controls (RBAC), segregation of duties (SoD), and privileged access. · Collaborate with cybersecurity, enterprise architecture, infrastructure, and application teams during project implementation. · Review encryption standards for data at rest and in transit. · Assess third-party vendors and cloud solutions for security and compliance requirements. · Track remediation activities and verify implementation of security recommendations. · Prepare assessment reports, risk documentation, and executive summaries. · Support internal and external security audits." Skills Required : · Candidates with strong hands-on GCP data security, with experience in assessing and implementing encryption, DLP and DAM controls. · Security assessment of GCP-based conversational AI, telephony, API, and backend integration architecture. · Strong experience in cloud security architecture, preferably Google Cloud Platform. · Hands-on knowledge of: GCP IAM/VPC/Shared VPC/Cloud Run/GKE/ BigQuery/ Cloud Storage/ Datastore/ Firestore/ Cloud KMS/ Secret Manager · Experience assessing data protection controls for PII, PCI, or regulated customer data. · Understanding of logging, SIEM integration, audit trails, and security monitoring. · Experience with threat modeling and architecture risk reviews. Nice to have · Experience conducting security architecture or application security reviews. · Understanding of cloud platforms such as Google Cloud. · Hands-on experience with security automation using Java or Python. · Knowledge of ERP security models and Segregation of Duties (SoD). · Familiarity with vulnerability management and risk assessment methodologies. · Strong analytical, documentation, and communication skills. · Ability to work effectively with cross-functional business and technical teams

Key Skills

Education

Bachelor's degree